Network Security

HiI have a PIX 506E with 6.3(5) and wanted to know if I can configure VPN client with group and user authentications. I know I can configure just group authentication so users dont have to use the password everytime they try to connect. However I am ...

Hi,Can some one plz help regarding configuration of redundant Ipsec Tunnel over EIGRP. Currently all remote sites are connected with ipsec tunnel. How can i connect all remote sites auto with DR after down of DC(Priamry Tunnel).Regards

I have basic threat detection turned on on a 5520 running 8.0(4) software. This is showing a number of "scanning" attacks. From the "sh threat-detection scanning-threat" command I can see the Targets and Attackers, but I would like more details. In p...

Hi allI am trying to establish a capture and I want to exclude passive FTP traffic from the capture. The problem is that in passive ftp the control session is well defined and there is no problem excluding it from the capture.But the data session is ...

I'm about to implement static-route tracking with the below setup:interface Vlan1 nameif inside security-level 100 ip address 192.168.2.1 255.255.255.0 !interface Vlan2 nameif outside security-level 0 ip address 6.2.8.138 255.255.255.248 !interface V...

Hi,I have a ASA5505 with a security plus license that has been 'in-production' for some time but I am experiencing a 'lock-out' of a particular IP address in a DMZ with minimal usage. This IP address is configured with ACL and NAT to allow:http traff...

I have configured the following ACL but when I check on the ASDM it is showing me as deny, I have check the config and can't see any issue with it.Can someone help, here is the config:name 163.1.158.138 misibm02b object-group network oucs_training_ro...

Hi, The primary CAM is no longer reachable by Web Console. An error appears while booting. The problem has occured after high availability activation. The error message is:- Starting perfigo: Starting High-Availability services: 2009/07/22_15:08:12 C...

Hello.My router listen the tcp port 9001. As I found it is "xRemote service", http://www.cisco.com/en/US/docs/ios/termserv/configuration/guide/tsv_dialin_term_svcs_ps6350_TSD_Products_Configuration_Guide_Chapter.html#wp1002661. Is there a way to clos...

I have a strange problem, it's something that just started recently when we had a user try to gain access with a Sprint Mobile Broadband card. We have quite a few remote users, probably not more than 6 ever connected to the VPN at once, and I have no...

Hi,I need to allow the following from inside to outside without compromising security, only initiated from inside.Allow SSH to devices on Internet from LANAllow PPTP and Cisco VPN (IPSEC) to connect from inside to outsideAllow ports 5130 outsideRestr...

Hi,We have two ASA 5505 installed on both sites. If I make a new V-lan on FW1 like V-Lan 100 and assign the IP range 192.168.10.1/24 and same V-lan I create on other site FW2 like V-lan 100 and not assigned any IP but I want the FW2 clent machine use...

Hi,I have an ASA acting as vpn firewall with two interfaces- VPN_external & local.once i vpn in and get my ip address from the vpn pool, if i am to telnet to another device in my network which is on a differenct ip segment,which interface from the VP...